Google Cloud Associate Data Practitioner — Question 50
Another team in your organization is requesting access to a BigQuery dataset. You need to share the dataset with the team while minimizing the risk of unauthorized copying of data. You also want to create a reusable framework in case you need to share this data with other teams in the future. What should you do?
Answer options
- A. Create authorized views in the team’s Google Cloud project that is only accessible by the team.
- B. Create a private exchange using Analytics Hub with data egress restriction, and grant access to the team members.
- C. Enable domain restricted sharing on the project. Grant the team members the BigQuery Data Viewer IAM role on the dataset.
- D. Export the dataset to a Cloud Storage bucket in the team’s Google Cloud project that is only accessible by the team.
Correct answer: B
Explanation
The correct answer is B because creating a private exchange using Analytics Hub allows for controlled data sharing with egress restrictions, minimizing the risk of unauthorized copying. Option A is incorrect as authorized views do not provide the same level of control over data egress. Option C is not the best choice since it doesn't restrict data copying effectively. Option D involves exporting data which increases the risk of unauthorized access, making it less secure.